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Self-modifying code extends addressing mode 

Paul Sofianos, Motorola Inc, Tempe, AZ 



As just about any assembly-language 
programmer knows, self-modifying 
code (SMC) is usually undesirable, 
unintentional, and destructive. However, 
the SMC routine in Listing 1 is extremely 
useful to extend the indexed, 16-bit offset 
addressing mode of the venerable HC05 
u.C from 8 bits, or 256 locations, to the full 
13-bit (8-kbyte) memory address space 
that the |xC's architecture supports. This 
routine is very useful for error tables, text 
messages tables, or any array manipulation 
for a large number of elements. (You can 
download Listing 1 from EDNs Web site: 
www.ednmag.com. At the registered-user 
area, go into the Software Center to down- 
load the file from DI-SIG, #2280.) 

Indexed addressing with offset is useful 
for selecting an element of byte length, L, 
in an N-element table. In general, you cal- 
culate the effective addresses of this ele- 
ment as follows: 

EA-TA+L3N+EO, 
where EA=effective address of the memo- 
ry location; TA=the absolute address of 
the start of the element table; L=number 
of bytes associated with each table ele- 
ment; N=the desired element number, 
beginning with zero; and EO=element 
offset, which includes all integer values 
from to L-l. 
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The HC05 calculates the quantity 
L3N+EO and places the result in the 
index register. The \xC then adds this 



dynamic value to the static quantity, TA, 
to arrive at the effective address. 
Unfortunately, the index register of the 



LISTING 1-SELF-MODIFYING-CODE SUBROUTINE 
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HC05 is only 8 bits long, limiting 
L3N+EO to values of to 255, which is 
inadequate for large tables. 

The SMC routine in Listing 1 easily 
overcomes this limitation. Simply put, the 
routine copies a dummy static-command 
set that employs extended addressing 
from ROM to RAM. The code calculates 



an effective address for EO=0 and stores 
the result as an absolute address, such as 
TA, for this RAM command. The code 
then executes this RAM command, fetch- 
ing a single byte from ROM at an 
absolute, extended address and saving the 
byte in RAM by using indexed, 8-bit offset 
addressing. The routine fetches successive 



memory locations from the data table and 
places the contents in the target table in 
RAM. This process continues until the 
transfer of all L bytes of the desired ele- 
ment is complete. (DI #2280) 
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VHDL procedure dynamically opens a file 

Jacques Behar, Rockwell Semiconductor Systems, San Diego, CA 



A simple VHDL-87 procedure opens a 
file whose name a command file or 
user conveys in runtime. You can ap- 
ply this technique to the reading or writing 
of data, control, and status files. This pro- 
cedure is useful for replacing the input 
stimuli file of a testbench without recom- 
piling the code (with a different stimuli file 
name) or rename the stimuli file name. In 
addition, the procedure can write the sim- 
ulation results to a file whose name consists 



of the input file 
name and any pre- 
ferred extension. 

The example in 
Listing 1 shows the 
skeleton of a pro- 
gram that reads 
and sums a file of 
integers. In this 
example, the pro- 
gram first reads the 



LISTING 1 -VHDL-87 PROCEDURE 



axe 1 •l- <-<;. and logic 1 1M . dl; 
u;c iaae . s 1 " ?gic_unc iqri^d .all; 
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i.itity REAL KILE IS 
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Signal fc?.AD J/ILE -.KDED 
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signal SINT 



.■.-tringfi to eg 1 
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[S(f-nM-.e, VLIMEJ ; 
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FILENAME <■ VSTR; 
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toe JB 

end for; 
end Cc5 HEM VILE; 



LISTING 2-VHDL READ.FILE PROCESS 



P.D_FILE; prDC&::.s 
variable XIWi 
variable VINT 



line; 
integer 



procedure saf.D_FILE_PBCCEDIJBE ( fiw.u : string) >1 

tile ifile : text is ir: tnirr.i! ; 

beqin 

while (f'DT endf i le ; i f 1 le ) ) loop 
rCddlincUiile; VLINE) ; 
re.rd(VLINE, VINT I ; 
SIHT < VIHi; 

if («K»£ile(>Ul<>)> then exit; end it; 

ha&e ;-iik.- «*_.».*»■ 

end lcop; 
end READ_FI£E-_PRC-EOLIS£:; 

beein 

w t iit until ff£&£ BW_I«T ■ 'l'j 

READ_FILE_PRI M JF i. I FILENAME ( 1 to r il.EKAXS _is:( ) 
READ^f I1E_EHD£D ~ ' 1'; 
end process HD FILE; 



input data file 
name from the 
command file 
"name.cmd" in the 
first four lines after 
"begin." Alter- 
natively, the user 
can interactively 
enter the data file 
name. A VHDL 
procedure embed- 
ded in a concur- 
rent VHDL process 
achieves the dy- 
namic file access. 
The main process 
uses the READ_ 
NEWJNT signal 
to activate the con- 
current READ_ 
FILE process in 
this example (List- 
ing 2). Upon acti- 
vation, the READ_ 
FILE process in- 
vokes the READ_ 



FILE_ PROCEDURE. The FILENAME 
signal conveys the name of the read file. 
Note that the length of the file name is 
also necessary, and the FILENAME_LEN 
signal conveys this length to the READ__ 
FILE procedure. 

The MAIN process has sole control 
over each access to the input file, which is 
obvious in this simple example that reads 
a new integer each time the MAIN process 
toggles the READ_NEW_INT signal. In 
some complex cases, the MAIN process 
could conditionally open a file after part 
of the simulation is complete. At the end 
of the file, the procedure exits automati- 
cally, and the file closes. 

You can download both listings from 
EDN's Web site: www.ednmag.com. At the 
registered-user area, go into the Software 
Center to download the file from Di-SIG, 
#2281. (DI #2281) 
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Configure buck converter for boost operation 

Mehrzad Koohian, Semtech Corp, Newbury Park, CA 



Buck converters are inherently dif- 
ferent from boost converters, because 
buck converters typically use the high 
side of the output as the power switch's ref- 
erence. However, a buck converter with a 
floating output drive section is config- 
urable as a boost controller (Figure 1). This 
circuit configures the SC1101 buck con- 
troller for a 5 to ± 12V boost with ±500 mA 
of output current. The BST pin, which nor- 
mally connects to a high-side drive supply 
in a buck converter, connects to V cc to 
drive the ground- referenced MOSFET. By 
tying PGND to circuit ground, the SCI 101 
becomes a boost controller, yielding 12V 
from 5V. An output charge-pump voltage 
inverter provides -12V at 0.5A as well. 

The sense resistor, R , serves two pur- 
poses. First, it assures proper start at 
power-up with full load by limiting the 
duty cycle. With the output capacitors not 
charged, a full-load condition demands 



high peak inductor currents. If the duty 
cycle exceeds a maximum limit, the 
inductor does not have a chance to dis- 
charge and will saturate. By limiting the 
peak currents and thus the duty cycle, the 
output capacitors can charge in several 
cycles upon start-up, thus preventing 
inductor saturation. R, also limits switch 
current during an overload or short cir- 
cuit. In this application, a value of 0.012V 
provides for peak-current limiting and 
allows the circuit to deliver the required 
output current of ±500 mA. 

A fast silicon rectifier, D 3 , rather than a 
Schottky diode, rectifies the 12V output. 
Use of the silicon rectifier balances the 
voltage drops in the -12V rectifier circuit, 
which is two Schottky-diode drops, with 
the 12V rectifier drop. Because the appli- 
cation is power-limited, the circuit can 
trade off current that the -12V supply 
draws for current on the 12V output. If 



the -12V output is unused, the 12V out- 
put can deliver 1A, and you can eliminate 
D,, D 2 , C,, and C r To improve efficiency 
under this condition, you can also use a 
Schottky diode for D r The controller pro- 
vides separate grounds for power drive 
reference (PGND) and analog-circuitry 
common (GND). These two grounds 
must connect at the controller. 

With dual outputs, the circuit's mea- 
sured efficiency is 91% with V =5V and 
93% with V, N =5.5V. In Figure ft circuit, 
L, consists of a #T37-52 core (Micro- 
metals Inc, www.micrometals. com) with 
34 turns of 26-gauge wire. For applica- 
tions that exceed ambient temperatures of 
50°C, you can use a slightly larger core, 
such as a #T38-52, or a Kool MU core 
material available from Magnetics Inc 
(www.mag-inc.com). (DI #2279) 
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Tying a buck converter's BST pin to V a and the PCND pin to circuit ground configures the converter for boost operation. 
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Circuit eases three-phase monitoring 

Henno Normet, Tavares, FL 



Measuring line-to-line voltages in 
a delta-connected three-phase sys- 
tem can present special problems. 
Because all three lines may be floating sev- 
eral hundred volts above ground, you can 
not use nonisolated, grounded oscillo- 
scopes or other single-ended instruments. 
Special isolation amplifiers are available for 
oscilloscopes, but they can cost several 
thousand dollars. You still need to make 
three measurements even with proper in- 
strumentation. The circuit in Figure 1 re- 
duces the magnitude of the line-to-line 
voltages and combines them into one 
ground-referenced signal (Figure j 
2) that you can safely 
monitor with a grounded 
oscilloscope, 

Phase C serves as a floating 
common (ground) for the circuit. 
Unity-gain buffer amplifiers IC, 
and IC, prevent loading of the 30- 
to-1 voltage dividers connected 
from A to C and from B to C. Op- 



Figure 2 



amp IC 3 is a differential-input instrumen- 
tation amplifier that provides a signal pro- 
portional to the voltage between A and B. 
Unity-gain amplifier IC 4 inverts the B-C 
signal such that the half- wave-rectified sig- 
nals can combine with the proper 120° 
phasing. The forward voltage drops across 
Dj to D 3 cause a small error. You can min- 
imize this error by using germanium 
diodes (lN34s), which have lower voltage 
drops than their silicon counterparts, and 
by keeping the signal levels as high as pos- 
sible. 

All the circuitry floats at power-line po- 



1.0 



AMPLITUDE 

(V) 0.5 




2i 



RADIANS 



tential; thus, it is dangerous to monitor the 
rectifier outputs. To obtain a safe output, 
you should use an IS0122P isolation am- 
plifier. The IS0122P is a unity-gain ampli- 
fier with an output that is fully isolated 
from its input. You need two line-isolated 
±15V supplies to power the IS0122P and 
the op amps. The circuit has additional ap- 
plications, the details of which are beyond 
the scope of this Design Idea. For example, 
in some cases, it is important that the three 
phase voltages are equal (balanced); their 
absolute values may be of less importance. 
It is much easier to detect an imbalance 
looking at a single waveform than it 
is looking at three waveforms. For 
continuous unattended monitoring, 
the design needs only one under- 
voltage/overvoltage detector, rather 
than one detector for each of the 
three phases. (Dl #2283). 



The output of the isolation amplifier in Figure 1 is a low-level, 
ground-referenced voltage. 
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ISOLATION BARRIER 



I Figure 1 
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ISOLATION AMPLIFIER=BURR-BROWN IS0122P. 

CAUTION: LETHAL VOLTAGES ARE PRESENT IN THE CIRCUIT. 

USE EXTREME CARE. 
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A quad op amp combines the three half-wave-rectified phase voltages into one voltage for easy monitoring. 
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PLL forms simple MSK demodulator 

Tom Napier, North Wales, PA 



IN minimum-shift-keying (MSK) sig- 
naling, two frequencies that differ by the 
bit rate represent a one bit and a zero bit. 
Normally, the frequency shift occurs at the 
peak of a cycle, so that neither the ampli- 
tude nor the slope of the waveform shows 
a discontinuity. We needed to transmit 300- 
baud ASCII text using ul trasonic transduc- 
ers. These devices have a very narrow band- 
width around their 25-kHz resonant fre- 
quency, making MSK the obvious choice 
for modulation. A zero bit becomes Figure 2 
84 cycles of 25.2 kHz, and a one bit 
is 83 cycles of 24.9 kHz. It is easy to gener- 
ate this signal with a PIC |xC and an 8-bit 
DAC. However, a traditional MSK demod- 
ulator circuit uses a center-frequency VCO 
and several mixers and filters. This design 
needs something simpler: to wit, the circuit 
in Figure 1 . 

Because the transmitter sends 25.2 kHz 
between characters, the design phase-locks 
a 74HCT4046 PLL chip to this frequency. 
The chip has three phase detectors, each 
with different characteristics. By choosing 



the correct two, you can demodulate the 
MSK input without losing phase lock on 
the zero-bit carrier. Phase Detector 3 on 
the PLL chip has a 360° linear range. That 
is, its mean output varies from to 5V and 
then switches back to 0V as the phase pass- 
es through 360°. Adjust the frequency of 
the PLL chip so that it locks to 25.2 kHz 



with a 180° phase error and an output of 
2.5V. If the oscillator frequency remains 
fixed, then you can recognize a one bit by 
its phase error, which swings from to 
360° during the bit. 

Because the initial lock is at the 180° 
point, a one bit results in a phase error that 
goes from 180° down to 0°. It then jumps 



(a) 



(b) 



(c) 



(d> 



ASCII INPUT 



25.2 kHz 24.9 kHz 

MSK SIGNAL VWWWWVWWVV^^ 



LOOP PHASE 



DATA PHASE 



The ASCII input character for the letter "g" (a) produces a frequency-varying MSK signal (b). The 
phase error as seen by the loop (c) produces the phase-error signal at TP (d) that drives the output. 




RZ OUTPUT 



A PLL makes MSK demodulation inexpensive and easy. 
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to 360° and continues back down to 180°. 
The net result is a ramp that goes down to 
0V, a jump to 5V, and then another down- 
going ramp. The mean voltage is 2.5V. 
Because the loop bandwidth is approxi- 
mately 15 Hz, the instantaneous effect on 
the VCO is small, and the net frequency 
change is zero. Rather than detect the 



ramp-jump-ramp waveform, use Phase 
Detector 1 as the data output. Because this 
block is a simple exclusive-OR gate, each 
one bit appears as a spike going from 5 to 
0V and back, A comparator can change it 
into a return-to-zero version of the input 
signal. Alternatively, the output can go to a 
retriggerable monostable with a 3.5-msec 



period to generate a good approximation 
of a nonreturn-to-zero output. Figure 2 
shows the circuit waveforms that occur for 
the letter "g." (DI #2284). 
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jjlC makes inexpensive sine-wave generator 

Jorge Luis B Romeu, IdeaWorks LTD, Syracuse, NY 



Y 



Fou can use A/D converters or exter- 
nal, controllable oscillators to gener- 
ate sine waves from low-power, low- 
cost u,Cs. However, these methods add 
cost, reduce reliability, increase circuit and 
software complexity, increase 
power consumption, and in- 
crease overall size. Alternatively, 
and with just a few lines of code, 
most u.Cs can easily generate 
multiple discrete sine waves. 
The example in Figure 1 uses a 
68HC705J1A to generate sine 
waves of 9 to 20 kHz. The circuit 
uses the u.P's square-wave out- 
put and switches between mul- I 
tiple RC filters of varying 
cutoff frequencies to 
achieve outputs with 
reasonable spectral purity. 

The necessary code consists 
of a simple subroutine that 
can adapt to different needs, 
such as tone duration and 
multiple (sequential) tone 
output (Listing 1). Moreover, 
the generated frequency is 
based on a variable, "free," that 
a previous routine can pass to 
this subroutine. The duration 
time is based on a timer, which 
eliminates calculations of tone 
duration based on the cycle 
period. The code in Listing 1 
is for illustrative purposes, but 
you can use it as-is with prop- 
er headers. (You can download 
Listing 1 and an example call- 
ing subroutine from EDhTs 



Web site: www.ednmag.com. At the regis- 
tered-user area, go into the Software 
Center to download the file from DI-SIG, 
#2278.) 

The basic circuit in Figure 1 uses only 



four output pins of the |xC; three pins are 
for filter returns, and the fourth is the u,P 
output. The filter constants are such that 
the highest cutoff frequency corresponds 
to the highest generated frequency. The 
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Based on a simple subroutine, a mC can easily generate multiple sine waves from 9 to 20 kHz by switching 
external RC filters on and off. 
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subsequent cascaded filters cut off at 
lower frequencies, and the circuit can 
switch these filters in or out depending on 
the desired output (Table 1). The llC's 
speed, code efficiency, the number of dis- 
crete frequencies to be generated, and the 
spacing between those frequencies all 
determine the maximum frequency of 
operation. The number of loops for one- 
half cycle of output frequency (50% duty 
cycle) equals the number of cycles per 
loop X time/cycle. With a 3.58-MHz crys- 
tal, the time per software cycle is 558 nsec. 
(The 705I1A |i.C uses one-half of the 
oscillation frequency for its internal oper- 
ating frequency.) Table 1 shows some 
example frequencies and the correspond- 
ing number of loops. 

The RC filters have a cutoff frequency, 
or -3-dB point, at the generated frequen- 
cy for maximum linearity and minimum 
distortion. You should note that the out- 



Ll STING 1 -FREQUENCY-GENERATING SUBROUTINE 



tgen 



timer 
innir3 



total 
repeat 



»*« t enrol 
Ida #04 
biOt 2,tccr 
bset ^output 
LdK rue 
decx 

bne innii 
bclr 4, output 
id* free 



doc-x 



r2 



brclr 6, tscr, innr 
Of docs) do another cycl 



; store accumulator in a temp variable 
number ts£ interrupts tor 250inS (5*135^3) 
clear cva.1 time interrupt 
tym -i- oscillator output 
nuafo^i 'or one h-aif cycle 
courts down for half cycle 
IE not :L tnishtid, keep counting 
turn ofi oscillator output 
nuiflber for othor half ot cycle 
count down for half: cycle 
l £ not £ini jhed, keep counting 
if 6 5ra3 not p*«*#d (set; t imu r / caun tor 



subtract irom :hm five 



for 



briu tirr. 
ill 



;havo 2 5 CrnS gone by? If not go back and 
; ret; to r/o accumulator 



put is approximately the same level across 
all frequencies because the resistors are 
always in series when driving a high- 
impedance load. However, because of 
leakage when a capacitor is active, or 
grounded, the lowest frequency has a 
lower output than the highest frequency. 
You should optimize the R and C values in 
Figure 1 for your application, desired out- 



put frequencies, and impedance. You can 
switch the filters on and off sequentially, 
independently, or in combinations to suit 
different needs. (DI #2278) 
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74ACT74 makes low-skew clock divider 



Tom Napier, Consultant, North Wales, PA 



Serial-data systems often generate an 
internal clock at twice the data rate for 
mid-bit sampling or for generating bi- 
phase codes. External equipment 



and some internal processes require Figure 1 
a clock that runs at the data rate. 
Simply dividing the twice-rate clock with 
a flip-flop generates a data-rate clock that 
is skewed by one logic delay with respect 
to the input. This delay can be a significant 
fraction of the bit period. You can use spe- 
cialized PLL-based low-skew divider chips 
to deal with this problem, but these chips 
have a limited frequency range and are not 
designed to follow rapid changes in the 
data rate. 

The circuit in Figure 1 uses a dual flip- 
flop, the 74ACT74, to generate both clock 
rates as well as both clock polarities with 
negligible skew. One half of the chip, 1C v 
acts as a normal divide-by-two circuit. The 
other half, IC , tracks the input clock be- 
cause the inputs leading edge triggers IC : )t 
high and the input's trailing edge resets 
IC,„. The divider transitions are synchro- 
nous within a few hundred picoseconds 
with the positive transitions of the twice- 
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The 74ACT74 dual flip-flop generates two clock rates with negligible skew. 



rate clock that the chip's other half gener- 
ates. This circuit works with inputs from a 
few hertz to more than 100 MHz. 

Without R , the input removes the reset 
from the twice-rate flip-flop at the same 
moment as the input clocks this flip-flop 
on. Theoretically, this setup is allowable be- 
cause the 74ACT74's reset-recovery time is 



specified as nsec. In practice, a resistor in 
the 100 to 500V region, in conjunction 
with the chip's input capacitance, delays the 
clock inputs slightly and adds a useful safe- 
ty margin. (DI #2282) 
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